matlab-model-ams-systems
Warn
Audited by Socket on Aug 2, 2026
1 alert found:
AnomalyAnomalyscripts/probeSlxModel.m
LOWAnomalyLOW
scripts/probeSlxModel.m
This module is best characterized as a Simulink introspection/dumping utility. It does not exhibit explicit malware indicators such as networking, command execution, or stealth mechanisms. However, it creates a high-sensitivity local JSON artifact by exporting model workspace variable names and values, plus extensive block/mask/dialog configuration, without redaction or access control. Additionally, addpath(modelDir) based on user-supplied modelPath can create MATLAB path/function shadowing risk in the running session. Treat this as a potential sensitive-data exposure tool, especially when models/workspaces may contain proprietary information or secrets.
Confidence: 62%Severity: 53%
Audit Metadata